CVE-2017-14745

Published: 26 September 2017

The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, interpret a -1 value as a sorting count instead of an error flag, which allows remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.

Priority

Cvss 3 Severity Score

7.8

Score breakdown

Status

Package	Release	Status
binutils Launchpad, Ubuntu, Debian	artful	Not vulnerable (2.29.1-1ubuntu1)
	bionic	Not vulnerable (2.29.1-1ubuntu1)
	cosmic	Not vulnerable (2.29.1-1ubuntu1)
	disco	Not vulnerable (2.29.1-1ubuntu1)
	eoan	Not vulnerable (2.29.1-1ubuntu1)
	trusty	Not vulnerable (code not present)
	upstream	Released (2.29.1)
	xenial	Not vulnerable (code not present)
	zesty	Ignored (end of life)
	Patches: upstream: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=94670f6cf11fc29cc6db6814b38c4305d9bcac96 upstream: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=e6ff33ca50c1180725dde11c84ee93fcdb4235ef

Severity score breakdown

Parameter	Value
Base score	7.8
Attack vector	Local
Attack complexity	Low
Privileges required	None
User interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity impact	High
Availability impact	High
Vector	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›